Escape ` and = when escaping HTML.

They can be used for nefarious purposes on old IEs.

Refs wycats/handlebars.js@83b8e84

src/main/java/com/samskivert/mustache/Escapers.java

@@ -15,7 +15,9 @@ public class Escapers
         { "'",  "'" },
         { "\"", """ },
         { "<",  "&lt;" },
-        { ">",  "&gt;" }
+        { ">",  "&gt;" },
+        { "`",  "&#x60;" },
+        { "=",  "&#x3D;" }
     });
 
     /** An escaper that does no escaping. */

src/test/java/com/samskivert/mustache/SharedTests.java

@@ -283,10 +283,11 @@ public abstract class SharedTests extends GWTTestCase
     }
 
     @Test public void testEscapeHTML () {
-        check("<b>", Mustache.compiler().compile("{{a}}").
+        check("&lt;b&gt;", Mustache.compiler().compile("{{a}}").execute(context("a", "<b>")));
-              execute(context("a", "<b>")));
         check("<b>", Mustache.compiler().escapeHTML(false).compile("{{a}}").
               execute(context("a", "<b>")));
+        // ensure that some potential XSS enablers are escaped
+        check("&#x60;&#x3D;", Mustache.compiler().compile("{{a}}").execute(context("a", "`=")));
     }
 
     @Test public void testUserDefinedEscaping() {